Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
File: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft (raw, json)
Hash identifier: 4Xd0MY3WTBNllYMc021hXdPvQQnVk8XWUeJKodAj2RU=
Subject key identifier: 66:CA:92:FF:83:CC:D8:C5:DE:1E:76:B1:18:C5:80:A0:5F:F2:99:24
Authority key identifier: 9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
Certificate issuer: /CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Certificate serial: 01A08A55608C0CA1A34FF91890DC7D158863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
Manifest number: 1A46
Signing time: Thu 10 Sep 2026 08:00:46 +0000
Manifest this update: Thu 10 Sep 2026 08:00:46 +0000
Manifest next update: Fri 11 Sep 2026 08:00:46 +0000
Files and hashes: 1: _Hgo7jcPjmaSfusUTNwDyQGV918.roa (hash: HrRfQ3y2o/21ByPzpK6PlTJikaZMMOxAwoJ1HV+ZCfE=)
2: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl (hash: 6oOqJZL9YkqTHOr6cUPFoktJBbKqJ0MeBKDCkHlMALI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:60:8c:0c:a1:a3:4f:f9:18:90:dc:7d:15:88:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Validity
Not Before: Sep 10 08:00:46 2026 GMT
Not After : Sep 11 08:00:46 2026 GMT
Subject: CN=66ca92ff83ccd8c5de1e76b118c580a05ff29924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f3:99:78:a0:eb:1e:17:bf:a0:57:cd:97:63:
8f:62:2c:45:e5:47:f9:f6:e7:ac:ec:5e:88:4d:2b:
0c:f1:f0:18:85:8a:74:96:cc:ed:b7:2c:12:0f:2a:
0a:5c:a9:02:6c:85:38:04:fa:21:23:f7:b5:f7:59:
06:d4:d8:d7:ff:b5:ec:8a:f7:d4:73:0b:e0:e2:b7:
bf:38:97:cb:82:20:a1:8c:f3:a3:0f:df:e9:41:8e:
84:b6:3e:9f:11:07:cc:03:4e:15:54:dd:35:c3:d0:
a8:b9:73:85:c6:6d:03:53:2e:0d:dd:54:8d:78:42:
e2:31:64:9c:75:63:6f:a7:5e:b1:b5:24:8d:53:7f:
fc:ed:9c:50:8f:9d:67:78:af:87:d9:f5:63:43:56:
57:2e:cc:dd:56:6e:8b:85:7f:78:6b:55:d4:1c:30:
21:91:a5:40:5e:85:09:6a:3c:10:69:9a:98:61:b5:
c9:99:03:0a:35:16:72:18:f1:a5:66:26:d6:30:5d:
9f:f3:83:3a:3f:be:e1:3e:c3:0a:17:3f:a2:42:85:
d3:a7:fd:fe:aa:7f:f8:72:ad:7a:12:8e:5f:a6:13:
74:74:3e:ba:e2:35:44:02:08:d4:85:91:dc:9a:3d:
60:7a:00:02:8a:af:4a:4a:4d:56:e4:5c:2b:3b:a9:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CA:92:FF:83:CC:D8:C5:DE:1E:76:B1:18:C5:80:A0:5F:F2:99:24
X509v3 Authority Key Identifier:
keyid:9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e1:05:44:98:6f:ea:c9:ca:f7:fd:b1:50:14:a9:a0:31:92:
70:b3:f8:1f:ac:87:8c:9a:0a:71:7a:4b:cf:54:6f:72:f7:1e:
c7:1a:0b:2e:75:72:0f:be:8e:fd:7c:c4:5e:23:72:d8:7f:ae:
f7:01:c6:3d:5c:b1:69:be:56:7a:8b:c3:c5:1f:11:c7:b1:2f:
d5:f8:36:9f:ce:88:05:17:be:5a:40:8a:53:44:cb:b7:80:5c:
ed:20:33:34:d6:33:09:91:31:f9:a5:22:e5:79:d8:be:bd:0e:
07:e9:d2:3e:c0:41:a2:1b:51:18:42:27:07:83:0c:40:b0:43:
84:8f:7b:86:26:33:5b:1c:26:52:42:bf:c6:76:4e:44:3a:38:
5c:07:62:09:fe:23:ce:ba:cd:fe:99:4b:ac:38:b8:33:59:9e:
8e:23:3f:20:ef:4a:95:0c:e2:f0:90:e6:91:0f:7a:ec:71:95:
44:d0:27:af:6a:eb:c1:f9:80:5d:82:b1:11:81:ff:91:53:40:
8c:26:61:2e:ca:07:60:80:3a:3e:a7:6c:88:f3:11:21:bc:97:
c3:0b:43:b0:78:9e:bb:e6:c6:ed:b0:3a:30:ff:25:c2:51:1e:
bb:21:b2:c4:2e:60:4a:99:6a:34:d9:5a:e6:4b:84:fe:eb:e9:
86:79:d9:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKVWCMDKGjT/kYkNx9FYhjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkN2JiMDA0MjAxZmQwNWI0OWQxMjIxZmNlNDc1OWVhNzBi
ZWM2ODQwHhcNMjYwOTEwMDgwMDQ2WhcNMjYwOTExMDgwMDQ2WjAzMTEwLwYDVQQD
Eyg2NmNhOTJmZjgzY2NkOGM1ZGUxZTc2YjExOGM1ODBhMDVmZjI5OTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2POZeKDrHhe/oFfNl2OPYixF5Uf5
9ues7F6ITSsM8fAYhYp0lszttywSDyoKXKkCbIU4BPohI/e191kG1NjX/7XsivfU
cwvg4re/OJfLgiChjPOjD9/pQY6Etj6fEQfMA04VVN01w9CouXOFxm0DUy4N3VSN
eELiMWScdWNvp16xtSSNU3/87ZxQj51neK+H2fVjQ1ZXLszdVm6LhX94a1XUHDAh
kaVAXoUJajwQaZqYYbXJmQMKNRZyGPGlZibWMF2f84M6P77hPsMKFz+iQoXTp/3+
qn/4cq16Eo5fphN0dD664jVEAgjUhZHcmj1gegACiq9KSk1W5FwrO6mvtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbKkv+DzNjF3h52sRjFgKBf8pkkMB8GA1UdIwQY
MBaAFJ17sAQgH9BbSdEiH85HWepwvsaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblh1d0JDQWYwRnRKMFNJZnprZFo2bkMteG9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9hZjE1ZWItN2E0ZC00YjBlLWJlYmIt
ZTliZWRlMDBjNmFmLzEvblh1d0JDQWYwRnRKMFNJZnprZFo2bkMteG9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9hZjE1ZWItN2E0ZC00YjBlLWJlYmItZTliZWRlMDBjNmFm
LzEvblh1d0JDQWYwRnRKMFNJZnprZFo2bkMteG9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeEFRJhv
6snK9/2xUBSpoDGScLP4H6yHjJoKcXpLz1RvcvcexxoLLnVyD76O/XzEXiNy2H+u
9wHGPVyxab5WeovDxR8Rx7Ev1fg2n86IBRe+WkCKU0TLt4Bc7SAzNNYzCZEx+aUi
5XnYvr0OB+nSPsBBohtRGEInB4MMQLBDhI97hiYzWxwmUkK/xnZORDo4XAdiCf4j
zrrN/plLrDi4M1mejiM/IO9KlQzi8JDmkQ967HGVRNAnr2rrwfmAXYKxEYH/kVNA
jCZhLsoHYIA6PqdsiPMRIbyXwwtDsHieu+bG7bA6MP8lwlEeuyGyxC5gSplqNNla
5kuE/uvphnnZDg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:01:58 2026 by rpki-client